A proof of concept to dump Django website's source code affected by NGINX's off-by-slash alias directive misconfiguration.
☆24Dec 8, 2022Updated 3 years ago
Alternatives and similar repositories for offbyslash-django-dumper
Users that are interested in offbyslash-django-dumper are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJ…☆22Jun 6, 2026Updated 4 months ago
- Hackfest Talk - Abusing PHP 7’s OPcache to Spawn Webshells☆10Nov 6, 2016Updated 9 years ago
- Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (…☆316Apr 1, 2019Updated 7 years ago
- Some personal exploits/pocs☆56Jun 2, 2020Updated 6 years ago
- Small Python-based web application honeypot with built-in analysis tools.☆12Sep 15, 2019Updated 7 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- The state of the art, modular, portable and easily extensible MITM framework in a Docker Container.☆15Dec 30, 2017Updated 8 years ago
- https://jira.atlassian.com/browse/JRASERVER-69793☆10Sep 16, 2019Updated 7 years ago
- ☆39Sep 23, 2019Updated 7 years ago
- PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)☆39Dec 12, 2018Updated 7 years ago
- Intentionally Vulnerable Nodejs Application & APIs☆21Apr 9, 2022Updated 4 years ago
- ☆10Oct 1, 2016Updated 10 years ago
- AWS doesn't care enough about BlueSky to post its releases there, but I do.☆16Updated this week
- Tool to try multiple paths for PHPunit RCE CVE-2017-9841☆29Oct 18, 2021Updated 5 years ago
- Scripts and tools for AWS Pentest☆54Oct 22, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Moodle (< 3.6.2, < 3.5.4, < 3.4.7, < 3.1.16) XSS PoC for Privilege Escalation (Student to Admin)☆17Apr 29, 2021Updated 5 years ago
- encrypted-linux-kernel-modules☆13Nov 4, 2020Updated 5 years ago
- Find CVEs that don't have a Detectify modules.☆22Mar 28, 2023Updated 3 years ago
- ☆102May 5, 2020Updated 6 years ago
- A browser bookmark to show hidden fields and enable disabled fields on a web page☆20Oct 29, 2023Updated 3 years ago
- URL-encode data streams via commandline☆14Oct 26, 2019Updated 7 years ago
- A repo containing some stagers and setup scripts for configuring Salt Stack to be a "bad"-ass C2☆18Jan 3, 2020Updated 6 years ago
- Robson is a simple LKM rootkit that uses the Linux kernel's kprobes tracing feature as a hooking mechanism.☆13Feb 16, 2023Updated 3 years ago
- Latest muhstik release (4.2.2)☆10Mar 25, 2014Updated 12 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Two Proof-Of-Concepts of SUID binary vulnerabilities on BMC Patrol allowing to elevate privileges from any linux user to root.☆11Jun 29, 2020Updated 6 years ago
- Confluence（<install-directory>/confluence/WEB-INF/）文件读取漏洞☆17Sep 2, 2019Updated 7 years ago
- Pulse SSL VPN Arbitrary File Read burp extension☆25Sep 24, 2019Updated 7 years ago
- Tool for scope management☆10Jun 8, 2022Updated 4 years ago
- domain name/brand infringement detector. pulls newly registered domains daily, searches variations of your company domain names and alert…☆24Feb 22, 2022Updated 4 years ago
- LLM Vulnerable Application☆13Aug 19, 2023Updated 3 years ago
- Repository of CTF challenges for The Cyber Jawara International 2024☆18Aug 13, 2026Updated 2 months ago
- ☆18Sep 22, 2018Updated 8 years ago
- Nmap to MongoDB☆12Mar 21, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The third open source piece of ransomware using bash☆15Aug 18, 2015Updated 11 years ago
- Repo for hosting rayder workflows☆65Aug 31, 2023Updated 3 years ago
- Artefacts from various retefe campaigns☆10Mar 9, 2019Updated 7 years ago
- Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will m…☆100Dec 30, 2019Updated 6 years ago
- A useful script to gather ASNs and prefixes of your target, while you are doing a wide recon process.☆12May 23, 2023Updated 3 years ago
- DNS Misconfiguration : S0x4 - Same Site Scripting Scanner☆15Jan 20, 2021Updated 5 years ago
- ☆126Oct 28, 2021Updated 5 years ago